Data & deletion

Salty lets agents read and write your CRM, so the data-control guarantees are part of the product. In short: deletes are reversible, you can hand out look-but-don’t-touch keys, and you can take all your data out — or delete it entirely — at any time.

​

Deletes are reversible (30-day trash)

Every record DELETE soft-deletes to a 30-day trash; restore anytime within the window. There is deliberately no agent tool — and no API route — that hard-deletes a record, so an agent can never irreversibly destroy your data. After 30 days, trashed records are purged by a daily job.

​

Least-privilege keys

Create a read-only API key (read_only: true on POST /api-keys) for any agent or tool that should only read. It can call GET endpoints, but every write returns 403 insufficient_scope.

​

Export everything

GET /workspace/export returns a single JSON document with every active record (people, companies, deals, notes, tasks, activities, custom objects) plus your schema — no lock-in, no support ticket.

​

Delete everything

POST /workspace/delete (admin/JWT only, type-to-confirm) immediately revokes all API keys and OAuth tokens and schedules your workspace for removal. You can also do this from the dashboard Account page.